Privacy Policy
Last updated: 15 August 2026
This policy describes how Balto Srls (“we”) collects and processes the personal data of users of the 06italiancharter.it website, in particular those who request or make a booking for a boat trip.
This policy is provided in accordance with Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”).
Data Controller
Balto Srls — Via Gregorio XIII 52, 00167 Rome (Italy) — VAT No. 17099671004.
Email: info@06italiancharter.it
You may write to this address for any enquiry regarding your data or to exercise the rights described below.
What data we collect
1. Data you provide via the booking form
- First name and surname
- Email address
- Telephone number
- Selected date(s) and requested route/experience
- Number of guests
- Additional services required (e.g. transfers, hostess, photo and video service, accommodation)
- Any additional notes you wish to include
These details are essential: without them, we cannot check availability, confirm the trip or contact you. Optional fields are marked as such on the form.
2. Payment details
The website does not process online payments and does not collect credit card details. The deposit and the balance are agreed directly with us following confirmation of the booking: we therefore only process the details necessary to record the payment and issue the accounting documents.
3. Invoicing details
If you request an invoice, we collect your address, tax code and/or VAT number, and recipient code.
4. Data collected automatically
Whilst you are browsing, the server and cookies may record your IP address, browser and device type, pages visited, and date and time. Further details can be found in the Cookie Policy.
5. Third-party data
If you provide the details of other passengers, you are required to inform them of the contents of this privacy notice. We ask that you provide, where necessary, only the data that is strictly essential.
⚠️ Special categories of data
In the ‘Notes’ field, you may provide us with details of any allergies, intolerances or dietary or health requirements relevant to safety on board or to the catering service. This data falls within special categories (Article 9 of the GDPR): we process it only with your explicit consent, exclusively for the purpose for which you provided it, and we delete it at the end of the trip. We ask that you do not enter any health-related or specific details in the ‘Notes’ field that are not strictly necessary.
Why we process your data and on what legal basis
| Purpose | Legal basis | Retention |
|---|---|---|
| To manage your booking request, confirm your trip, communicate timetables, boarding points and any changes, and manage ancillary services | Performance of a contract or pre-contractual measures (Article 6(1)(b)) | Duration of the relationship + 24 months to allow for any disputes |
| To record the deposit and final payment, issue an invoice, and fulfil tax and accounting obligations | Legal obligation (Art. 6.1.c) | 10 years from the date of issue of the document |
| Safety of navigation and any obligations towards the Maritime Authority | Legal obligation (Art. 6.1.c) | In accordance with the law |
| Dietary or health requirements as stated in the notes | Explicit consent (Art. 9.2.a) | Until the end of the trip |
| Defence of a right in court | Legitimate interest (Art. 6.1.f) | Until the dispute is resolved |
| Non-technical cookies and analytics | Consent obtained via the banner | See Cookie Policy |
We do not send newsletters or promotional communications, nor do we use your data for marketing purposes. The communications you receive relate exclusively to your booking.
Where processing is based on consent (dietary or health requirements, non-technical cookies), you may withdraw your consent at any time by writing to us, without this affecting the lawfulness of the processing carried out prior to withdrawal.
Consequences of failure to provide data
Failure to provide data marked as necessary makes it impossible to process your booking. Refusal to provide optional data (notes, additional services, marketing) has no impact on your booking.
Who we share your data with
Your data may be processed, on our behalf and within the limits of the respective purposes, by:
- the website hosting provider and email service provider;
- the provider of the online booking system installed on the website;
- the bank through which we receive payments;
- our tax and accounting adviser;
- the providers of any additional services you have requested (e.g. transfers, catering, hostesses), limited to what is necessary to provide them;
- public authorities, where required by law.
The parties processing data on our behalf are appointed as data processors in accordance with Article 28 of the GDPR. The up-to-date list is available on request at info@06italiancharter.it.
We do not sell or pass on your data to third parties for their own marketing purposes.
Transfers outside the European Economic Area
Data is normally processed within the EU. Where a supplier requires a transfer to third countries, this takes place only where there is an adequacy decision by the European Commission or standard contractual clauses with appropriate additional safeguards. You may request a copy of the safeguards in place.
Automated decision-making
We do not carry out profiling or automated decision-making that produces legal effects or similarly significantly affects you (Article 22 of the GDPR).
Security
We take appropriate technical and organisational measures (encrypted connection, access control, backups) to protect data from loss, misuse and unauthorised access. However, no system is 100% secure.
Your rights
You may exercise the rights set out in Articles 15–22 of the GDPR at any time:
- access to your data and a copy thereof;
- correction of inaccurate or incomplete data;
- erasure (‘right to be forgotten’), except for data that we are required by law to retain;
- restriction of processing;
- data portability in a structured, machine-readable format;
- objection to processing based on legitimate interests;
- withdrawal of consent at any time.
Please email info@06italiancharter.it: we will reply within one month of receiving your request.
You also have the right to lodge a complaint with the Italian Data Protection Authority (Piazza Venezia 11, 00187 Rome — garanteprivacy.it) or with the supervisory authority in the country where you reside.
Minors
The service is not directly aimed at minors: bookings must be made by an adult, who is also responsible for any data relating to minors listed among the passengers. If you believe that a minor has provided us with data independently, please write to us and we will delete it.
Cookies and ‘Do Not Track’ requests
The use of cookies and analytics tools is described in the Cookie Policy, where you can also change your preferences at any time. The website does not currently respond to ‘Do Not Track’ signals from your browser: preferences can be managed via the cookie banner.
Links to third-party websites
The website may contain links to third-party websites or services, which are not covered by this policy. We encourage you to read their respective privacy policies.
Changes
We may update this policy to bring it into line with regulatory or operational changes. The current version is always the one published on this page, with the update date shown at the top.